Mike Brasher

Currently **libjson** and **vicsetup** are located under **sgx-lkl/src/libjson** and **src-lkl/src/vicsetup**. Selected sources are included in the makefile above. Consider treating these as external dependencies (like **libdevmapper** and **cryptsetup**). They could...

LKL does not use x86-64 Linux syscall numbers

4

**lkl** and **sgx-lkl-musl** seem to be using the **ARM 64-bit** (aarch64) syscall numbers rather than the **X86 64-bit** (x86_64) syscall numbers. While debugging I noticed that **close()** passes **57** to...

The previous CodeQL fix broke the mount-docker-image tool, because ``docker_image`` it not necessarily a file path. It can also be an image name.

new "make check" target

1

This target runs a subset of checks (tests) to verify that Mystikos is basically running. It is a good check to run before submitting a PR.

require that --mount arguments be absolute paths

1

When passing ``myst --mount =``, require that ```` and ```` are absolute paths.

This change reduces the **cpython-test rootfs** from **1,742mb** to **817mb** or by **53%**. It also makes the build twice as fast.

new docker-build-ext2 script

1

Simple internal script to build a docker image and then uses ``mount-docker-image``, writing the resulting root file system to an EXT2 file. For example: ``` # docker-build-ext2 Dockerfile ext2rootfs ```

fix and reenable cpprestsdk solution

1

The cpprestsdk was disabled because it fails in the Jenkins pipeline but not locally.

Unix-domain sockets does not support MSG_PEEK

1

The Unix-domain sockets implementation does not support ``MSG_PEEK`` when calling ``sendmsg()``.

Unix-domain sockets does not support control data

1

The Unix-domain sockets implementation does not support the passing of control data (ancillary data). Supporting passing of extra data is easy enough, but control data is typically used to pass...